Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr

Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr

Written By Anoop C Nair
Last Updated July 17, 2024
Posted In SCCM
SHARE

Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr. We encountered an interesting issue during our monthly security patching.

WSUS sync was completed successfully, and we could download some patches from the Windows Update service; however, the .NET patches were not downloaded. I’ve seen this issue while creating the monthly patch package for the SCCM/ConfigMgr software update. 

However, a “couple of retries” often solved this patch download issue. This time, retrying/retrying, restarting the server, etc., didn’t help us. It was giving us Error 403 (HttpSendRequest failed HTTP_STATUS_FORBIDDEN or HTTP_STATUS_DENIED).

In this post, you will find all the details on how to Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr.

Patch My PC
Index
Issue – Fix Error 403 HTTP STATUS FORBIDDEN SCCM
Following are the Log File Entries which I Found in PatchDownloader.log
More Details Fix Error 403 HTTP STATUS FORBIDDEN SCCM?
Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr – Table 1

Issue – Fix Error 403 HTTP STATUS FORBIDDEN SCCM

As a next step, we analyzed PatchDownloader.log. As expected, we found some clues about the issue. In the PatchDownloader.log located on the SCCM site server, the patch file with the “.CAB” extension downloads without any problems.

Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr - Fig.1
Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr – Fig.1

However, we’re getting a “403 HTTP STATUS FORBIDDEN” download error for the patch files with the “.EXE” extension. The issues turned out to be with proxy and Firewall box configuration. Many networks are nated behind the source SCCM server; hence, the network and the proxy team also struggled to get to the issue’s root.

Following are the Log File Entries which I Found in PatchDownloader.log

The network team found the “TCP_DENIED/403” log entry and made the necessary settings to “TCP_CLIENT_REFRESH_MISS/200”!! Thus, the network and proxy teams helped resolve the issue. More details and log file samples are at the bottom of the post.

Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr - Fig.2
Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr – Fig.2


More Details Fix Error 403 HTTP STATUS FORBIDDEN SCCM?

Try username configmgr\ServiceAccount from the registry. Proxy enabled proxy server 10.10.10.12 HttpSendRequest failed HTTP_STATUS_FORBIDDEN or HTTP_STATUS_DENIED. Fix Error 403 HTTP STATUS FORBIDDEN SCCM Software Update Patch Package Download Failed ConfigMgr.

Download destination = \\ACNCMCAS\SUPackages\Nov\979d1441-d8f7-4844-9a4f-a68abd66a68f.1\MSIPatchRegFix-AMD64.exe . Contentsource = http://wsus.ds.download.windowsupdate.com/msdownload/update/software/secu/2012/10/msipatchregfix-amd64_5011cb29b096fb674a4795ee8fc2f7fdad33863a.exe .

Errors noticed in SCCM 2012 Download Software Update Wizard!!!
ERRORS
•There was an error downloading the update. (403)
Warning: Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 7, Windows Vista and Windows Server 2008 x86 (KB2978128)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008, Server 2008 R2 x64 (KB2978125)
ERRORS
•There was an error downloading the update. (403)
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008 x86 (KB2978125)
ERRORS
•There was an error downloading the update. (403)
•There was an error downloading the update. (403)
Warning: Security Update for Windows Server 2003 x64 Edition (KB3006226)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 (KB3006226)
ERRORS
•There was an error downloading the update. (403)
Warning: Cumulative Security Update for Internet Explorer 6 for Windows Server 2003 x64 Edition (KB3003057)
ERRORS
•There was an error downloading the update. (403)
 Warning: Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 (KB3003057)
ERRORS
•There was an error downloading the update. (403)
 Warning: Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 x64 Edition (KB3003057)
ERRORS
•There was an error downloading the update. (403)
 Warning: Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 x64 Edition (KB3003057)
ERRORS
•There was an error downloading the update. (403)
 Warning: Cumulative Security Update for Internet Explorer 6 for Windows Server 2003 (KB3003057)
ERRORS
•There was an error downloading the update. (403)
 Warning: Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 (KB3003057)
ERRORS
•There was an error downloading the update. (403)
Warning: Security Update for Windows Server 2003 (KB3002885)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 x64 Edition (KB3002885)
ERRORS
•There was an error downloading the update. (403)
Warning: Security Update for Windows Server 2003 x64 Edition (KB2993958)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 (KB2993958)
ERRORS
•There was an error downloading the update. (403)
Warning: Security Update for Windows Server 2003 x64 Edition (KB2992611)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 (KB2992611)
ERRORS
•There was an error downloading the update. (403)
Warning: Security Update for Windows Server 2003 x64 Edition (KB2991963)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 (KB2991963)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 x64 Edition (KB2989935)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Windows Server 2003 (KB2989935)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 7, Vista, Server 2008, Server 2008 R2 x64 (KB2978128)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 4.5, 4.5.1 and 4.5.2 on Windows 7, Windows Vista and Windows Server 2008 x86 (KB2978128)
ERRORS
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008, Server 2008 R2 x64 (KB2978125)
ERRORS
•There was an error downloading the update. (403)
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008 x86 (KB2978125)
ERRORS
•There was an error downloading the update. (403)
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2003 (KB2978124)
ERRORS
•There was an error downloading the update. (403)
•There was an error downloading the update. (403)
 Warning: Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Server 2003 for x64-based Systems (KB2978124)
ERRORS
•There was an error downloading the update. (403)
•There was an error downloading the update. (403)
Warning: Security Update for Microsoft .NET Framework 1.1 SP1 on Windows Server 2003 and Windows Server 2003 R2 x86 (KB2978114)
ERRORS
•There was an error downloading the update. (403)

Proxy / Network side logging 

TCP_DENIED/403 0 GET http://wsus.ds.download.windowsupdate.com/msdownload/update/software/secu/2012/10/msipatchregfix-amd64_5011cb29b096fb674a4795ee8fc2f7fdad33863a.exe - DIRECT/wsus.ds.download.windowsupdate.com application/x-dosexec CMF:4 DCF:200000 ERR:10 BLOCK_ADMIN_FILE_TYPE_12-No_Auth_for_IP_Policy-No_Auth_for_IP_Identity-NONE-NONE-NONE-DefaultGroup <iw_swup,9.2,-,"-",-,-,-,1,"-",-,-,-,"-",-,-,"-","-",-,-,iw_swup,-,"-","-","unknown","unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-"> - 376734 -

TCP_CLIENT_REFRESH_MISS/200 178122994 GET http://wsus.ds.download.windowsupdate.com/c/msdownload/update/software/crup/2014/11/mso-x-none_4003f83d82ddccd3c0905c04d80c377e94780c78.cab - DIRECT/wsus.ds.download.windowsupdate.com application/vnd.ms-cab-compressed CMF:4 DCF:0 ERR:0 ALLOW_WBRS_12-No_Auth_for_IP_Policy-No_Auth_for_IP_Identity-NONE-NONE-NONE-DefaultGroup <iw_swup,9.2,-,"-",-,-,-,1,"-",-,-,-,"-",-,-,"-","-",-,-,iw_swup,-,"-","-","unknown","unknown","-","-",13550.37,0,-,"-","-",-,"-",-,-,"-","-"> - 470619 -

Resources

SCCM Related Posts Real World Experiences Of SCCM Admins (anoopcnair.com)

We are on WhatsApp now. To get the latest step-by-step guides, news, and updates, Join our Channel. Click here. HTMD WhatsApp.

Author

Anoop C Nair is Microsoft MVP! He is a Device Management Admin with more than 20 years of experience (calculation done in 2021) in IT. He is a Blogger, Speaker, and Local User Group HTMD Community leader. His main focus is on Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion · 1 comment

  1. Hi,

    I hope you found the solution a long time ago, but for those who are still stuck with this problem and arrived on this page while seeking a solution :

    DISABLE UAC !

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
    “EnableLUA”=dword:00000000

    And reboot

    Reply

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws

Key Takeaways Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws! In the July 2026 Patch, Microsoft introduced new features designed to improve the overall Windows experience. The update adds enhancements to Windows Update for more flexible update management and introduces Point-in-Time Restore, providing an additional recovery option for […]

AC Anoop C Nair 9 min read
Intune

2026 June KB5094126 KB5093998 Windows 11 Patch | 3 Zero Day Vulnerabilities and 200 Flaws

Key Takeaways 2026 June KB5094126 KB5093998 Windows 11 Patch | 3 Zero Day Vulnerabilities and 200 Flaws! The June 2026 Windows 11 Patch Tuesday update brings several improvements to File Explorer. It adds support for additional archive formats, including UU, CPIO, XAR, and NuGet Packages (NUPKG). The update also preserves View and Sort preferences in […]

AC Anoop C Nair 10 min read
Intune

2026 May KB5089549 KB5087420 Windows 11 Patch | 0 Zero Day Vulnerabilities and 120 Flaws

Key Takeaways The Windows 11 May 2026 Patch KB5089549 KB5087420 Update brings important security fixes, performance improvements, and reliability enhancements across the operating system. The update introduces new features such as Xbox Mode for gaming, File Explorer improvements, enhanced input and sharing experiences, better taskbar and Windows Hello reliability, and additional enterprise management capabilities for […]

AC Anoop C Nair 8 min read
SCCM

ConfigMgr 2603 Introduces New Early Update Enrollment Process

Key Takeaways In this post we are discussing the ConfigMgr 2603 Introduces New Early Update Enrollment Process. Microsoft has officially released Configuration Manager version 2603 to the Early Update Ring, giving organizations an opportunity to test upcoming improvements before the global production rollout. The release is targeted at enterprises running ConfigMgr version 2409 or later […]

AC Anoop C Nair 3 min read